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CLAIMS 

1. A method of generating an authentication for updating a mobile 
5 . • communications device's location to a second communications device, 
the mobile communications device being registered to a proxy server, the 
method comprising the steps of, at the time of perfonming the location 
update, 

I. providing a first Input from the proxy server and a second Input from the 
10 second communications device to a first algorithm to generate a shared 

secret, 

II. using the shared secret as the authentication when transmitting the 
location update to the second communications device. 

15 2. A method according to claim 1 wherein the first algorithm is a hash 
function and wherein the hash of the first and second random numbers is 
the shared secret. 

3. A method according to daim 1 or 2, wherein the mobile communications 
20 device has a device address, the address being derived from a second 

algorithm using a cryptographic key associated with the mobile device as 
the Input to the algorithm. 
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4. A method according to claim 3, wherein the second algorithm is a hash 
function and the hash of the cryptographic l^ey Is the device address of 
the mobile communications device. 

5 5.. A method according to claim 4, wherein the mobile communications 
device provides the device address and the cryptographic key to the 
second communications device and wherein the second communications 
device verifies the validity of the device address prior to providing the 
second Input to the first algorithm. 
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20 8. 



A method according to claim 5, wherein the verification comprises the 
steps of: perfonning a hash of the received cryptographic key to obtain a 
digest, and comparing the digest of the hash function with the received 
address. 

A method according to any one of claims 3 to 6, wherein the 
cryptographic key Is a public key of an asymmetric key pair associated 
with the mobile communications device. 

A method according to claim 7. wherein the second communications 
device sends an encrypted copy of the second Input to the mobile 
communications device, the encryption being performed using the public 
key of the mobile device. 
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9. A method according to any one of the preceding claims, further 
comprising the steps of: using the shared secret as an input to a third 
aigorithm, and obtaining an output from the third algorithm as the 
authentication. 



10. 



A method according to any one of claims 1 to 9, wherein the 
authentication is a hash of the concatenation of the shared secret and 
the location update message. 



10 11. A method according to claim 10, further comprising the step of 
transmitting the location update message together with the authentication 
to the second communications device. 

12. A method according to claim 11, further comprising the step of the 
15 second communications device computing a hash of the concatenation 

of the shared secret and the recelyed location update message for 
comparison with the received authentication. 

13. A method according to claim 12. wherein If the said comparison Is the 
20 same, the second communications device registers the new location of 

the mobile communications device and transmits any subsequent 
messages to the new location. 
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A method according to any one of the preceding claims, wherein the first 
input from the mobile communications device Is a random number. 
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15. A method according to any one of the preceding claims, wherein the 
second input from the second communications device is a random 
number. 

6. A method according to any one of tlie preceding claims, wherein the 
second communications device is mobile. 

A method according to any one of claims 1 to 15, wherein the second 
communications device has a fixed inter-network address. 
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